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DETAILED ACTION 

Claims 1-25 are currently presented and have been examined. 

Response to Arguments 

Applicant's arguments filed 2 September 2005 have been 

ii 

fully considered but they are not persuasive. 

The Applicant argues that the prior art does not teach that 
the Acct -Session-ID is unique with respect to a plurality of 
access servers as amended. The Examiner is not persuaded by this 
argument. "RFC 2866" does disclose this limitation page 3, 
section 1.2 "Terminology", specifically "session"). 

Further, The Applicant admits that "existing 
systems ... operated in situations in which it is ^possible for 
the AAA server 30a to receive n session values, where each of 
the n session values corresponds to a different NAS 28 but is 
the same number. The AAA server 3 0a can easily handle this 
condition because the AAA server 30 associates each session id 

* 

value with the corresponding NAS 28 based upon a unique NAS 
address for each NAS. Because each of these duplicative session 
id's is coming from a different NAS address, the AAA Server 30a 
can distinguish between the NAS's 28a-28n when managing the 
sessions involved'. Specification, p 10. Thus, existing 
techniques were available to handle the situation in which 
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multiple network access server communication the same session 
identifier to the same AAA server.". 

In view of the Applicant's admission, the prior art teaches 
that the AAA server is able to distinguish which NAS or network 
access server the session ID is coming from based on the NAS's 
address even though the session ID is the same. Therefore, each 
session between the AAA server and the corresponding NAS is 
unique because the AAA server can delineate between NASes. 
Therefore, the Applicant's admission strengthens the Examiner's 
position that generating a unique session identifier which is 
unique with respect to a plurality of access servers exists in 
the prior art . . Therefore , this limitation as claimed cannot be 
the basis for patentability. 

The Applicant argues that the cited prior art does not 
teach providing a unique session identifier to an 
Authentication, Authorization, and Accounting (AAA) module which 
receives AAA processing requests from the network access 
servers. The Examiner does not agree. Both "RFC 2866'' as shown 
previously by the Examiner and the Applicant's admitted prior 
art both disclose this limitation. 

* 

It is noted that the Applicant has made failed to show why 
each and every amendment made to the claims have any sort of 
patentable novelty or advantage. MPEP 714.04 states: 
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"In the consideration of claims in an amended case where no 
attempt is made to point out the patentable novelty, the claims 
should not be allowed. See 37 CFR 1.111 and MPEP 714.02." 

Therefore, the case is not in condition for allowance. 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs 
of 35 U.S.C. 102 that form the basis for the rejections under 

* 

this section made in this Office action: 

A person shall be entitled to a patent unless - 

<b) the invention was patented or described in a printed publication in this or 
a foreign country or in public use or on sale in this country, more than one 
year prior to the date of application for patent in the United States. 

Claims 1, 3-4, 6, 8-12, 14-16, 18-19, 21, and 23-24 are 
rejected under 35 U.S.C. 102(b) as being anticipated by "RFC 
2866". 

Regarding claim 1, "RFC 2866" discloses a method for 
maintaining a unique session ID in a network, comprising: 

creating a session identifier for a user, wherein the 
unique session identifier is unique with respect to a plurality 
of network access servers ("Acct-Session-ID"; page 3, section 
1.2 "Terminology", specifically "session"; page 4, section 2 
"Operation", specifically "When a client is configured to use 
RADIUS Accounting, at the start of service delivery it will 
generate an Accounting Start Packet..."; page 15, section 5.5 
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"Acct-Session-ID", specifically "An Accounting-Request packet 
MUST have an Acct-Session-ID") ; and 

providing the unique session identifier to an 
Authenication, Authorization, and Accounting (AAA) module 
wherein each of the network access servers is configured to 
request AAA processing from the AAA module ("RADIUS Accounting 
Server") . (page 4, section 2 "Operation", specif ically "When a 
client is configured to use RADIUS Accounting, at the start of 
service delivery it will generate an Accounting Start 
Packet... and will send that to the RADIUS Accounting server...") 

Regarding claim 3, "RFC 2866" discloses the method recited 
in Claim 2, wherein the unique identifier is an IP address. 
("NAS- IP- Address") 

Regarding claim 4, "RFC 28 66" discloses the method recited 
in Claim 1, further comprising providing the unique session 
identifier to an off-load server ("forwarding server") . (pages 4 
and 5, section 2.3, "Proxy", specifically "1. The NAS sends an 
accounting-request to the forwarding server"; pages 15-16, 
section 5.5, "Acct-Session^Id", specifically "An Accounting- 
Request packet MUST have an Acct-Session-Id") 

Regarding claim 6, "RFC 2866" discloses a system, 
comprising : 
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a network access server ("NAS" or, alternatively "client") 
wherein the network access server is configured to generate a 
unique session identifier for a user, wherein the unique session 
identifier is unique with respect to a plurality of network 

« 

access servers, wherein the plurality of network access servers 
include the network access server; ("Acct-Session-ID"; page 3, . 
section 1.2 "Terminology", specifically "session"; page 4, 
section 2 "Operation", specifically "When a client is configured 
to use RADIUS Accounting, at the start of service delivery it 
will generate an Accounting Start Packet..."; page 15, section 
5.5 "Acct-Session-ID", specifically "An Accounting-Request 
packet MUST have an Acct-Session-ID") 

wherein the network access server is configured to provide 
the unique session identifier to an AAA module; and wherein the 
AAA module performs AAA processing for each of the plurality of 
network access servers, (page 4, section 2 "Operation", 
specifically "When a client is configured to use RADIUS 
Accounting, at the start of service delivery it will generate an 
Accounting Start Packet... and will send that to the RADIUS 
Accounting server...") 

Regarding claim 8, "RFC 2866" discloses the system recited 

* 

in Claim 6, further comprising: the plurality of network access 
servers; wherein each of the plurality of network access servers 
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is configured to generate a unique session identifier; ("Acct- 
Session-ID"; page 3, section 1.2 "Terminology", specifically 
"session"; page 4, section 2 "Operation", specifically "When a 
client is configured to use RADIUS Accounting, at the start of ■ 
service delivery it will generate an Accounting Start 
Packet..."; page 15, section 5.5 "Acct-Session-ID", specifically 
"An Accounting-Request packet MUST have an Acct-Session-ID") 

Regarding claim 9, "RFC 2866" discloses the system recited 
in Claim 6, further comprising an off-load server ("forwarding 
server"), the off-load server being coupled to receive the 
unique session identifier from the network access server, (pages 
4 and 5, section 2.3, "Proxy", specifically "1. The NAS sends an 
accounting-request to the forwarding server"; pages 15-16, 
section 5.5, "Acct-Session-Id", specifically "An Accounting- 
Request packet MUST have an Acc't- Session- Id") 

Regarding claim 10, "RFC 2866" discloses the system recited 
in Claim 9, wherein the off-load server is configured to provide 
the unique session identifier to the AAA module, (pages 4 and 5, 
section 2.3, "Proxy", specifically "2. The forwarding 
server ... forwards the request to the remote server") 

Regarding claim 11, "RFC 2866" discloses the system recited 
in Claim 9, wherein the off-load server is configured to provide 
the unique session identifier to the AAA module, and the AAA 
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module is configured to perform port counting, (pages 4 and 5, 
section 2.3, "Proxy", specifically "2. The forwarding 
server ... forwards the request to the remote server") 

Regarding claim 12, "RFC 2866" discloses the system recited 
in Claim 6, further comprising the AAA module, the AAA module 
being further configured to receive the unique session 
identifier from the network access server, (page 4, section 2 
"Operation",, specifically "When a client is configured to use 
RADIUS Accounting, at the start of service delivery it will 

■ 

generate an Accounting Start Packet... and will send that to the 
RADIUS Accounting server...") 

Regarding claim 14, "RFC 2866" discloses the system recited 
in Claim 9, wherein the off-load server is further configured to 
generate a start record, the off-load server being further 
configured to associate the start record with the unique session 
identifier (page 4, section 2. "Operation", specifically "When a 
client is configured to use RADIUS accounting, at the start of 
service delivery it will generate an Accounting start 
packet..."; page 15, section 5.5 "Acct-Session- ID" , specifically 
"An Accounting-Request packet MUST have an Acct-Session- ID") ; 
and the off-load server is further configured to provide the 
start record to the AAA* module that provides for performing 
accounting processing, (pages 4 and 5, section 2.3, "Proxy", 
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specifically "2. The forwarding server ... forwards the request to 
the remote server") 

Regarding claim 15, "RFC 2866" discloses the system recited 
in Claim 9, further wherein the off-load server is further 
configured to generate a stop record, the off-load server being 
further configured to associate the stop record with the unique 
session identifier; (page 4, section 2 "Operation", specifically 
"At the end of service delivery the client will generate an 
Accounting Stop packet..."; page 15, section 5.5 "Acct-Session- 
ID", specifically "An Accounting-Request packet MUST have an 
Acct- Session- ID") and 

the off-load server is further configured to provide the 
stop record to the AAA module that provides for performing 
accounting processing, (pages 4 and 5, section 2.3, "Proxy", 
specifically "2. The forwarding server ... forwards the request to 
the remote server") 

Claims 16 and 18-19 are also rejected since claims 16 and 
18-19 recite an apparatus that contains substantially the same 
limitations as recited in claims 1 and 3-4 respectively. 

Claims 21 and 23-24 are also rejected since claims 21 and 
23-24 recite a computer program product that contains 
substantially the same limitations as recited in claims 1 and 3- 
4 respectively. 
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Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which 
forms the basis for all obviousness rejections set forth in this 
Office action: 

(a) A patent may not be obtained though the invention is not identically 
disclosed or described as set forth in section 102 of this title, if the 
differences between the subject matter sought to be patented and the prior 
art are such that the subject matter as a whole would have been obvious at 
the time the invention was made to a person having ordinary skill in the 
art to which said subject matter pertains. Patentability shall not be 
negatived by the manner in which the invention was made. 

The factual inquiries set forth in Graham v. John Deere 
Co., 383 U.S. 1, 148 USPQ 459 (1966), that are applied for 
establishing a background for determining obviousness under 3 5 
U.S.C. 103(a) are summarized as follows: 

1. Determining the scope and contents of the prior . art. 

2. Ascertaining the differences between the prior art and 
the claims at issue. 

3. Resolving the level of ordinary skill in the pertinent 
art . 

4. Considering objective evidence present in the 
application indicating obviousness or nonobviousness . 

Claim 5 is rejected under 35 U.S.C. 103(a) as being 
unpatentable over "RFC 28 66" . 

Regarding claim 5, "RFC 2866" discloses the method recited 
in Claim 1 . 

"RFC 2866" does- not expressly disclose wherein creating a 
unique session identifier further comprises creating a unique 
session identifier for the plurality of network access . servers, 



Application/Control Number: 10/032,628 Page 11 

Art Unit: 214 3 

however, "RFC 2866" does disclose wherein a unique identifier is 
used for each of a plurality of network access servers ("NAS-IP- 
Address" ) . 

It would have been obvious to one of ordinary skill in the 
art at the time the invention was made to create a unique 
session identifier for each of a plurality of network access 
servers since "RFC 2866" suggests that any sort of method of 
generating a unique session identifier may be used ..(page 16, 
section 5.5 "Acct-Session-ID", specifically "Other encodings are 
possible") . One of ordinary skill in the art would have found it 
obvious to create a unique session identifier by using a unique 
identifier for each of a plurality of network access servers as 

* 

claimed based on the teachings and suggestions of "RFC 2866". 

Claims 2, 7, 13, 17, 20, 22, and 25 are rejected under 35 
U.S.C. 103(a) as being unpatentable over "RFC 2866" in view of 
Applicant's admitted prior art. 

Regarding claim 2, "RFC 2866" discloses the method recited 

in Claim 1. 

"RFC 2866" does not expressly disclose wherein creating a 
unique session identifier further comprises appending a unique 
identifier to a local session identifier, wherein the one of the 
network access servers generates the unique session identifier, 
however, "RFC 2866" does disclose a unique session identifier 
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associated with an access server ("NAS-IP-Address") . ("Acct- 
Session-ID"; page 3, section 1.2 "Terminology", specifically 
"session"; page 4, section 2 "Operation", specifically "When a 
client is configured to use RADIUS Accounting, at the start of 
service delivery it will generate an Accounting Start 
Packet..."; page 15, section 5.5 "Acct-Session-ID", specifically 
"An Accounting-Request packet MUST have an Acct- Session 1 ID" ) . 

It would have been obvious to one of ordinary skill in the 
art at the time the invention was made to append a unique 

identifier associated with an access server to a local session 

J 

identifier since "RFC 2866" suggests that any sort of method of 
generating a unique session identifier may be used (page 16, 
section 5.5 "Acct-Session-ID", specifically "Other encodings are 
possible") . The Applicant admits in the specification on page 10 
that both the AAA server and the NAS are aware of a unique 
identifier such as the NAS address and a local session 
identifier such as a Session ID. The generation by a NAS of a 
unique session identifier by appending a unique identifier such 
as the NAS address to a local session identifier such as the 
session ID or a port as noted previously by the Examiner would 
have been obvious to one of ordinary skill in the art since the 
NAS is aware of these identifiers and, since the prior art 
teaches that the NAS provides a session ID to the AAA server, 
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appending a known identifier to another known identifier in 
order to produce a unique session identifier would have been 
obvious to one of ordinary skill in the art. 

Therefore, one of ordinary skill would have found it 
obvious to append a local session identifier to a unique 
identifier to create a unique session identifier as claimed 
given the teachings and suggestions of "RFC 2866" and the common 
knowledge of one of ordinary skill in the art as admitted by the 
Applicant . 

* . 

Regarding claim 7, "RFC 28 66" discloses the system recited 
in Claim 6, wherein the network access server is . associated with 
an IP address. ("NAS-IP-Address") 

"RFC 2866" does not expressly disclose wherein and the 
unique session identifier comprises the IP address. 

Claim 7 is rejected since the motivations regarding the 
obviousness of claim 2 also apply to claim 7. 

Regarding claim 13, "RFC 2866" discloses the system recited 
in Claim 6 . 

"RFC 2866" does not expressly disclose wherein the network 

» 

access server is further configured to generate the unique 
session identifier by appending an IP address of the network 
access server to a local session identifier, however, "RFC 2866" 



4 
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does disclose a IP address associated with an access server 
("NAS- IP-Address") . 

Claim 13 is rejected since the motivations regarding the 
obviousness of claim 2 also apply to claim 13. 

Claims 17 and 20 are also rejected since claims 17 and 20 
recite an apparatus that contains substantially the same 
limitations as recited in claims 2 and 5 respectively. 

Claims 22 and 25 are also rejected since claims 22 and 25 
recite a computer program product that contains substantially 
the same limitations as recited in claims 2 and 5 respectively. 

Conclusion 

Applicants amendment necessitated the new ground (s) of 
rejection presented in this Office action. Accordingly, THIS 
ACTION IS MADE FINAL. See MPEP § 706.07(a). Applicant is 
reminded of the extension of time policy as set forth in 37 
CFR 1.136 (a) . 

A shortened statutory period for reply to this final action 
is set to expire THREE MONTHS from the mailing date of this 
action. In the event a first reply is filed within TWO MONTHS 
of the mailing date of this final action and the advisory action 
is not mailed until after the end of the THREE-MONTH shortened 
statutory period, then the shortened statutory period will 
expire on the date the advisory action is mailed, and any 
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extension fee pursuant to 37 CFR 1.136(a) will be calculated 

from the mailing date of the advisory action. In no event, 

» 

however, will the statutory period for reply expire later than 
SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier 
communications from the examiner should be directed to George C. 
Neurauter, Jr. whose telephone number is (571) 272-3918. The 
examiner can normally be reached on Monday through Friday from 
9AM to 5:30PM Eastern. 

If attempts to reach the examiner by telephone are 
unsuccessful, the examiner's supervisor, David Wiley can be 
reached on (571) 272-3923. The fax phone number for the 
organization where this application or proceeding is assigned is 
571-273-8300. 

Information regarding the status of an application may be 
obtained from the Patent Application Information Retrieval 
(PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, 
see http://pair-direct.uspto.gov. Should you have questions on 
access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free) . 
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